German officials confirm 18 million emails and passwords stolen

Re:German officials confirm 18 million emails and passwords ... by jimktrains2 on Friday April 04, 2014 @05:02PM (#7534356)

I wonder why internet companies don't just do the right thing and use good hashes (or better methods like SRP, but that requires client updates) so that none of this would even mater

[ Parent | on HN ]

Re:German officials confirm 18 million emails and passwords ... by mildtrepidation on Friday April 04, 2014 @05:52PM (#7534648)

Because they don't start out with well-designed systems (that costs money), and they don't want to upgrade their systems to be good (that costs money).

It's very simple, but it's only obvious after you've seen it happen too many times.

[ Parent | on HN ]